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Question: 1 


Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP does not 
encrypt email, leaving the information in the message vulnerable to being read by an unauthorized 
person. SMTP can upgrade a connection between two mail servers to use TLS. Email transmitted by 
SMTP over TLS is encrypted. What is the name of the command used by SMTP to transmit email over 
TLS? 


A. OPPORTUNISTICTLS STARTTLS 
B. FORCETLS 
C. UPGRADETLS 


Answer: B 


Question: 2 


Developers at your company are creating a web application which will be available for use by anyone 
on the Internet, The developers have taken the approach of implementing a Three-Tier Architecture 
for the web application. The developers are now asking you which network should the Presentation 
Tier (front- end web server) be placed in? 


A. isolated vlan network 
B. Mesh network 

C. DMZ network 

D. Internal network 


Answer: A 


Question: 3 


Your business has decided to add credit card numbers to the data it backs up to tape. Which of the 
following represents the best practice your business should observe? 


A. Hire a security consultant to provide direction. 

B. Do not back up cither the credit card numbers or then hashes. 

C. Back up the hashes of the credit card numbers not the actual credit card numbers. 
D. Encrypt backup tapes that are sent off-site. 
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Answer: A 


Question: 4 


What is the main security service a cryptographic hash provides? 


A. Integrity and ease of computation 

B. Message authentication and collision resistance 
C. Integrity and collision resistance 

D. Integrity and computational in-feasibility 


Answer: D 


Question: 5 


A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and 
library 
are required to allow the NIC to work in promiscuous mode? 


A. Libpcap 
B. Awinpcap 
C. Winprom 
D. Winpcap 


Answer: D 


Question: 6 


What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS? 


A. Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail. 

B. Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited 
to securely negotiate keys for use with symmetric cryptography. 

C. Symmetric encryption allows the server to securely transmit the session keys out-of-band. 

D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use 
symmetric encryption instead. 


Answer: D 
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Question: 7 


When a security analyst prepares for the formal security assessment - what of the following should 
be done in order to determine inconsistencies in the secure assets database and verify that system is 
compliant to the minimum security baseline? 


A. Data items and vulnerability scanning 

B. Interviewing employees and network engineers 
C. Reviewing the firewalls configuration 

D. Source code review 


Answer: A 
Question: 8 
From the following table, identify the wrong answer in terms of Range (ft). 
Standard Range (ft) 
$02.1lla 150-150 
$02.11b 150-150 
$02.1l1¢ 150-150 
$02.16( WiMax) 30 miles 
A. 802.11b 
B. 802.11g 
C. 802.16(WiMax) 
D. 802.11a 
Answer: D 


Question: 9 


These hackers have limited or no training and know how to use only basic techniques or tools. 
What kind of hackers are we talking about? 


A. Black-Hat Hackers A 
B. Script Kiddies 

C. White-Hat Hackers 
D. Gray-Hat Hacker 
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Answer: C 


Question: 10 


ViruXine.W32 virus hides their presence by changing the underlying executable code. 
This Virus code mutates while keeping the original algorithm intact, the code changes itself each 


time it runs, but the function of the code (its semantics) will not change at all. 
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Here is a section of the Virus code: 


https://www.certkillers.net 


Questions & Answers PDF Page 6 


_ lots of encrypted code 


l 
2 ate 
3. Decryption Code: 
4. C=C+l 

5. A=Encrypted 

6. Loop: 

T. BA 

&. C=3214*A 

9. B=B XOR CryptoKey 

10. *A=B 

11. C=1 

12. C=A+B 

13. A=A+1 

14. GOTO Loop IF NOT A=Decryption Code 
15. C=C"2 

16. GOTO Encrypted 

17. CryptoKey: 

18. some random number 


What is this technique called? 


A. Polymorphic Virus 
B. Metamorphic Virus 
C. Dravidic Virus 

D. Stealth Virus 


Answer: A 
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